Skip to content
ImpactrStart an engagement

Frameworks & standards

CVE

Common Vulnerabilities and Exposures

Common Vulnerabilities and Exposures (CVE) is a public, standardized catalog that assigns a unique identifier (e.g. CVE-2021-44228) to each publicly known vulnerability, so tools and teams can refer to the same issue consistently. CVEs describe specific instances; CWEs describe the underlying weakness types.

Key points

  • Unique IDs for specific, publicly known vulnerabilities.
  • Enables consistent reference across tools and feeds.
  • Complements CWE (weakness types) and CVSS (scoring).

Related

References

Impactr finds and proves whether flaws like this are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.